Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
File: u2qi6QuXDRvK7tElJWMlCBFT-dA.cer (raw, json)
Hash identifier: wymJubuaj53iMaRFGXaoqWb5VvDQN5jIXh4d6quSCbM=
Subject key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAC922D1928336B9458CA55CB86555
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 20517
AS: 58144
IP: 91.239.62.0/24
IP: 185.20.252.0/22
IP: 185.138.232.0/22
IP: 2a00:5260::/32
IP: 2a07:1040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:c9:22:d1:92:83:36:b9:45:8c:a5:5c:b8:65:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:72:40:36:48:15:d2:b2:b6:41:91:e6:37:
86:4f:c1:07:db:bb:20:25:91:d2:7e:88:f5:6c:81:
35:a0:d4:ab:c3:87:a8:be:98:c6:a3:7c:0b:a7:b8:
ee:9c:0f:3a:56:7b:6b:a0:9e:d5:34:e8:68:e9:07:
b7:d9:b7:21:46:6e:c0:be:4a:04:c1:32:9e:b1:e7:
4c:d0:da:a5:9e:8f:0d:a1:1a:d9:99:ae:ce:32:00:
2a:20:29:b0:20:a5:08:62:4b:84:37:1f:80:e2:f1:
1a:db:2e:5b:88:26:78:20:32:b8:98:d7:65:36:e9:
a6:40:e7:4d:bf:5e:8d:76:c2:5f:5a:59:89:6c:ca:
4c:d1:0e:41:3c:41:e0:af:b9:45:4b:96:33:c0:a6:
0d:4e:b8:ae:2d:66:c2:fb:f8:20:ce:c8:dc:17:12:
4f:07:a8:08:1b:42:28:c3:b4:5a:41:67:5d:64:9b:
8b:34:06:4c:84:ee:f6:74:9d:da:30:f2:66:90:32:
6d:dc:98:f7:1a:34:b3:e2:bc:2d:11:ad:28:5c:3b:
f9:5f:a9:e0:40:80:b1:4b:d8:05:8c:bc:3c:8e:bf:
58:18:0e:07:9f:55:2c:38:25:6c:e3:85:aa:f3:ea:
8c:f8:5c:f3:3c:ce:9f:af:b7:04:5a:65:34:cb:13:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.62.0/24
185.20.252.0/22
185.138.232.0/22
IPv6:
2a00:5260::/32
2a07:1040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20517
58144
Signature Algorithm: sha256WithRSAEncryption
b0:c2:ef:66:8d:a5:a1:b3:df:38:69:55:ae:8c:fc:4d:33:56:
5a:14:53:2a:0c:17:f3:18:ea:d0:65:99:86:e4:cc:af:fd:f8:
6b:21:e0:57:3e:59:83:7f:2e:44:15:db:46:18:ef:99:7d:e6:
18:13:80:cb:7a:fc:db:de:21:b7:fa:1d:27:b6:fe:69:79:34:
4e:33:0c:64:6c:b3:ca:ec:e3:62:e0:67:d0:6c:45:b9:0a:ed:
49:d2:93:71:2b:73:17:4e:37:76:63:ec:4c:c2:b8:f6:1a:0a:
a1:9e:8e:7b:c2:63:60:ff:bf:1a:51:26:9b:cf:2d:7f:a4:b4:
15:74:ca:19:79:d5:8a:8a:4c:3b:4f:34:60:5f:13:96:02:99:
9d:91:d8:76:b4:da:70:d8:e3:75:0b:d3:ac:7e:80:52:cc:61:
db:0d:05:d6:41:1a:ca:38:0f:a3:f6:15:54:9d:69:ac:d5:17:
77:c7:27:27:8b:76:74:af:d9:68:2e:28:44:8e:b0:11:c4:2f:
9a:f3:31:bf:7a:8c:8e:4e:f3:0c:6b:c6:95:06:47:84:05:24:
8d:b7:f6:11:95:c4:ad:00:fa:9b:60:80:b3:2b:b5:97:0d:9a:
89:c6:77:f4:c8:9b:c5:d6:d0:5f:8c:ba:c5:1b:cf:44:f4:dc:
18:49:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:12:04 2026 by rpki-client